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& ffi X £ ZL £ & #M £ * Z> fHH#§ 0 
ftff BSI JC <fc « S: ftUfflfi" S fflffl^®. £ Z ffi X , 

& ffiX « 3 £ 4#M £ f £ R£ # ®i&= 

[I*ai 0] tMH**#«tt, ^P5^GF(2 n )_h(Z)^W$:^e)«^{c 

fa § B^r 1 1 m\n% (D vrfmzk & & ^ u m m& g f c p ) ±<Dmn & n e> ic 15 
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(dkb^ t & z. t & 1 1 z> m&m 9 ic una m ^ urst. 

is s saur^a <z> ttm ic & v * t * c s «± # y m & mm-r z m ± # y 

&m*.&z. £&&&£* &m*m&o 
mmaumtatSLmi 

[0 0 0 1] 

■[».«©*t6af^«p] 

[0 0 0 2] 

. 

, «sfeO F (p)tt«E»[S:JR»[p T?Bfe*Ufc^y <Z>Jfe^) ^IJMbfeRSA (Rive 
st. Shamir Adleman) ^iSBfcJ&oT^S. ^^UHlP^-T'li^ (If y h» 

tt&^&fc&lCiBgfcfckBtfS 1 2 fcfy 1 0 2 4 tT y K 2 0 4 8 fcfy 
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) T'lt. 1 6 0 fcf v V*? 2 2 4 \f.v h(DW.WX\ 1 0 2 4 tf y 2 0 4 8 If y 
[0 0 0 3] 

(Dfc±faGF (2 n )K£&Um-(D2'D\Z±mZnZ> 0 GF(2 n )©MJm, XOR 
(exclusive 0R$Efl&tt»3l$0 l>m*X*2bV, in»H£K:ffi±# U &£l5ftV*fc«> 
, «E»[©fWjfe?fili|Ctcj:«GF(p)tC*fLT«Jt7f*)*. U*»l/ft#e>, G F ( 2 n 
^©flmBff-^sSlCfcV^Tfc, S^SMftT^ify XAOD 1 OtfeS, ffiRD 
SA (fe/^M*7;i/JyXA) JCJ:£^£r&-tr7K- h £&JCteG F ( p ) 

[0 0 0 4] 

*#fFiciR 2 #m> = iuii0r;^y^iiGF(p)i:ft5%©T'fey 
xa^ g f ( 2 n ) ±<Dmn^<omm^ ft $ *IT V % £ „ 

[0 0 0 5] 

1 ] 

^#5f#f^, r^j£f&J , tt?fitS3fi«3fc£, 1 9 9 0^ 
[#4Mfc*Ctt 2 ] 

Johann Groszschaedl , "A Bit-Serial United Multiplier Architect 
ure for Finite Fields GF(p) and GF(2m)", C.K. Koc, D. Naccache, and C. P 
aar (Eds.): CHES 2001, LNCS 2162, p. 202-219, 2001. Spr inger-Verlag Berli 
n Heidelberg 2001. 

[#MffF£iSK3] 

I.F.Blake, N. P. Smart, G.Seroussiig, #*i&fl$fR, rffRffiUPf-^ 
J, ^7V>xfi^r-^3>, 2 0 0 1*£ 

4] 



tttSE4# 2003-3037024 



#2003—015301 



, 1 9 9 6^ 

[0 0 0 6] 

#£GF(2 n )KJ:Smi!C££fT^££#&g*:fcS. Ife^ot, Bf#ia!2&{C 
fcVMTli, GF(p)(DtI^5:^e)mmfli:GF(2 n )c7)MBS:^e>^#lh^ 

33T% 8tfy HSS©*3¥#S:MV%*ia»7?fen«, G F ( p ) ©Il^ft^ 
M^i:GF(2 n )©?I^$:^e)^m#l^^)M^5:«-&T, ^Is? ZT'tyVm*. 

zmm£LT*m®mmiz¥?L2>&wiZ'b2\<\ u*»u mmtntcmzz 2t? 

ifcGDgiilO^-^-T'iffltlU ^fe-fel^^^^K^^it^i-^fcfe, GF(p)tf) 
^#§:^e)m^#I^GF(2 n )<DMm5:#e)M»^i:$:M^^«1-'5i:-rtl^ 

Ufc^oT, ^^Bt-^trSfctl-g) 1 6 0 fcfy h->f> 1 0 2 4 hf«y h fcV^ofcgt 

GF(p)(DM»t$:^e>^^i:GF(2 n )(7)^^^e)^##li:$: 

[0 0 0 7] 

^yzJtvmn^timmmz&^Tte, gfcp^o^h^gfc 
2 n )i:(7)^I^^c7)T;l/^uxA^i{$i:^^|l|CT^•^.o ^<Dfr®>, mmthtcm 

JlfB©#M#fF:£ltK2fC.&, GF(p)±®SItGF(2 n )±0S|Eil{C 
Hfr*2/Ur^/*JW»T?»y, iiUCGF(2 n )<Z)}|||rtg(c3r-vi;- (carry : ffi_h 

#»;) &^-MTii (Disable) ts=b©T'*s. v ?;vif ^tsti 

DC&ff e>£iMCte, $$-V-^tnimz, drt'J-^ftTfitf-yh (LSB:Least 
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Significant Bit) j&*£>ft±#hfy h (MSB : Most Significant Bit) £ Vfc 
[0 0 0 8] 

ifc±llfe <te>&C> &W«*mF-£*Ctt 1 6 0 If y h-"f> 1 0 2 4 hi> hilVNofc 

'mmm%i*y7V4x<DW**mm'?&. ami 

0 2 4 tf^hX2 > 1 0 2 4 bfy h (DA* ta^®AS ICffl 

^ >r ^9 u tc <fc s e •maM £ <fc tF@2S®j^T? z z t &t~ § -r , a^ 
&fcif&^£ tthit. % l m<Dmffmzm*ttM<D j r- % z e> * Rinses 

[0 0 0 9] 

Rf^lc^T, G F (p)±©I|[i:G F (2 n )±©?IIi:*«3ti-5, W^m 

mzj&mLt~m*<DT7v*-z/ayizmLT%mM0ziitfn%.z>o &&m& 

Zlfom L fefffi© t ^ U ^ - */ a > CDM t L T & »J fTIE*f # tc <fc S flft U ITiElH 
Bfrtf&s 3, 4#M) o 

[0010] 

* G F ( p )&T$G F ( 2 n ) CD 2 offilf^If S=jtP3Ht#^ R S 

[0 0 11] 
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* y u - $ * e> ffi^j £ n s %■& 2 it!* & 2 <d mmm* izmm -t z m± **» t 
©•^ffHttwaj £ 5 sunt ic as s _t# y n «: amr*- * « _t# y ^ #hs«s t & 

**fr*3ftJM&»C;fcV*T, 2<D&*{£ (^pg#:GF(2 n )) JC*f*-«HI»&fTe> 

© turn jh nm±ifivmnBG> tmmm £ & am u mmztt^&mnzfio 

[0 0 12] 

tfffl tctfjjtu, A^jffl^2©^A^TfeS«-^lcm«£^^ LTffi^t- 

y i: > mn^a © tf * « ± # y ffiinff #a © tmfcMn h & an» 

xoR?j|i!Eic<fcsiniS[^©*«:^AT^sp^ffi*"rs. *fe«±^yffiiuir#s 
mn^mizxmn^ti^mn^^±x<Dm^m^x^MM^jk^±Mm 

[0013] 

vT-tsmy) £.L,x&mmznz>o mmm^mtLxit. m^mmztsnzm 
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[0014] 

mw<?>mm<?>mm 
*mm<Dmmiz. wi/umwc^T, GF(p)±0iitGF(2 n )± 

•&X^<V^*yV - (Wallace tree) g|S£, V'yT.V U 2 jijBtfc 
2 <B-«87&5£ fClitS Iff ± Will fcJCfcoTflfrfcSiXS. 
[0 0 15] 

MlfS^Onlfy h©2A*=feA= (a n _ p • • a p a Q ) , B = ( b n 
_ v ' ' b r b 0 ) t79*y U-»*ettlfy hZ£<D®ftm* 

¥MM& (HA) (FA) tlz^-oxm^tD^X^Ko 

Ml l«C8 Ify t>©A*A, B &0![fcLfc£J|t©>f ^-SJ&as'fBU SI 2 & 

hi <»fkmz&^x®frfe*t\%^&tc.to<nm®m&i£m^m. m 3 «®2 0Dm 

02 JC^t-r®i&iCj:oT> n^^^J^ajbj (i, j=0, 1, 2, 3, 
4, 5, 6, 7) tf-eft-^ftUffiStu 03 IC^f m&<DttJ&-t2>ffi<n±lMg.%$ 

tt-it^tian^mbnzo f it> H3 (c^f mm&mti (d 0 , d r ~, a 

15 ) t±(fiM?:ltiI^i:bT^$ti§= 

[0 0 16] 

^©^Cl^;©J:e){C2 htf>A#fC*fbT c a r r y • («f±# 
yffl) hsum (#fMt) ©2lfy hSrff 



£#Dlf#§«> »2^<Z) J: -plC 3 A^C^fbT c a r r y t s u m<D 2 fcf 
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[»2] 

|sum FA (x 0 ,x,,x 2 ) = x 0 ©x, ©x 2 

(carry FA (x 0 ,x,,x 2 ) = x 0 • x, + x, • x 2 + x 2 • x 0 

±©#^tcJ3v^T,- r.j , r + j ji, tftfftAND (Hat) , OR (flft 
3g*D) &j£i*UTV*& 0 £fc roj (C r + j ©SIJMB-SttXOR (^^MfP 

[0 0 17] 

±3B©«fc3&«E»m3i£IH8&totfLT, GF(2 n )±©fHjtL^T o ^ l/^il 
fgte, car ryttMtf, U -ASCENT, as#Bt&*ff r £ JC^T 

F(2 n )±©iltlic a r r y L fc^fcib, «79*y »J -mc&ZBft 

* © x o r st» © # irfc ic SHII^ JH t* & y , #f_h tf innc* tc <t s & &n • 

[0 0 18] 

JSJLL©.6lC^<fr, *mt©^ffitC«fcsmW*tt, ±©«1, 2^{C^Ssu 
m HA ()^t>* s u m FA ()©XO R £M^T, Z1©^IC G F ( 2 n ) (D^M^ £*I© 

H7tt, *^J6©^ffitc<fcsmDt«©«^S:^ , tH , C*)S. 

0 7 #§»©7£ll{Ccfc£3ftirHl 0 0ttr79^y U-fflJl 1 0 

t.m±Vftamili i 2 Oii&tfix., v?xyv-Bi 1 ott, A±H«lc*f lt^ 
HlZ&mm (s urn) !:W»Ji(carry) h^Itlt^s umltlil 
1U, s umffJIfflSl 1 1 ©iflMCj:£ffi±#yte£j&nl*"*<5 carryfl 
mi 12t, s umttgfltl 1 l&tf c a r r yffUMPl 1 2 ©IfjlMJII £;!jn» 
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Lxm±\fmm-^i 2 oic^^-ha/fat i/-f 1 1 3 £.&mz.&. s umiti 
mmK&&mmiai*vt:mtoTmjj-t&%<D'V3b&. c a r r ytmasi 

1 2te. s umffBSPl 1 1 tCT^m^tlS*m^a^©^TCO^$:*^T^^ 

*»&tfcfefWJM*K: <fc u m±w v&t mmm t t=. mm e> *> <z>t*& s . 

ffi-htfflnllSI 1 2 0 », HA/FA7N1 1 3 ©ffl^&MHt^lC^LT 
[0 0 1 9] 

¥*ntr»fc£fll!3M&fc©y W (HA/FA array) ^^Ss umfflll 1 1{C 
«fcU c a r r y i: s umfc^tS. fit, a#©«f»*l|C»(Z)r7 9^y U 
l«ID#jfC&3 c a r r y H s u mh^lSSaitTtCjIi^mt-^CDtC^ 
U *HI©^I(Z)iI^ 1 0 OtCfcttS^^yU-fflSl 1 OT-te, carr 
yftHtasi 1 2ts umffjlSl 1 1 fc&/B^T> c a r r y £ s urn 
y U--e ADULT V^„ 

s umtHMPl 1 HCt s um^S:ilII (ot»JXOR) t X ^ < Z. £ \Z J: 
•J, 2 n- 1 If 7 h®GF(2 n )©iI^#P)tl§o t^WUttt, n 
fc^y N<Z>8P#«£ 1 tfy hlCXORi?m$tiSo £fl&#HKtt:3 Ify hA#fC*fL 
tltfyh^sumS^tSOt', s umff-||£fflSl 1 l±fo<DMMl*> FA& 
It 
[«3] 

riog 3 «i 

[0 0 2 0] 

— carr yffHSl 1 2©EBIfll^tt, BTtgT*&S 

3 tfy hA#lC*f LT 2 tf«y h©c a r r yi: s umt^WSO 

T% f^IlttFAtlt^-e 
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[»4] 

[0 0 2 1] 

0 7 &#flgLTWe>^J5sJ:"5K:, #l£5S<Z>7gfflUC i^il^ 1 0 0 J£, GF( 
p)^)^fl©WS[StCGF(2 n )©^m#l^=mS-t^> s u initial 1 1 

^ir^tc, sumitigpi 1 1 mmm^^(D^t.m±im^\^ 

iibfes umftm§Pl 1 1<DWM£ c a r r yft3§Lg|5 1 1 2<DMm^^. 

s umimspi 1 1 mmizm-t 2>mma>i3tf}±MmzM^ a *<nt~®>. muz 

^ti^CsumstlSMll (GF(2 n )©^mi§tC=raai-^Sl5^) 

£3£&C J: y c a r r yfffDCfflS 1 1 2 £ ttfcV*. s 

umit^pi i nt. &£&t:mmmnmc$&ftT\,\fcyLORmzM#>fc%<?> 

[0 0 2 2] 

1 0 OlZ&ttZy^XVV-Bl 1 OO^MSr^-tiaT'feSc 0 

BI8 ic^i-^xy y -SB i i o 5 o<z)*-^-^<b&3o tfcgisicfc 

^T, H^fp (A) ©A^JtegP^a. e^LPP (O) tf>AffiimGF(p)&tfGF 
(2 n )<DmMlC&ttZ>&mm (s urn, ^T> HI s umi:»t) > MAEP (• 
) &A&±JlZGF (p)<D&M.<Z>frKjStf2>&mm (s urn, J^T, i2sumi: 
. K^fP (■) (DAmJjitGF (v)(Dmmc.&VZ>W±tf>)m (c a r r 
y) ^SH^So 0 8tC^f »7^X^y-g[Sl 1 0 (Dm&it. mm<Dffi}& 
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[0 0 2 3] 

i2Xr-^tt^l^f-^#^c a r r y7»3l£*lTl&2 

s umtf&jjZtlZtmz. H 1 1 s um^iD^$tlT c 

arry^lsumi:»3^ 0 r^T% fg 1 S> t» 2 2?IC 

i s um&fln£t*s©£#, ® 7 izBVfcV^xy y -gp 1 ioosu 

mtmgpi 1 1 ic^tout^So -r&fci^ ^©fg2*^-^T*ffi2/£*i33ii 

sum*'!, GF(2>iim'fe4. 
[0 0 2 4] 

13 X^-^T*l±^2 *-x— *>*Xfc c a r r y&tf&2 s u m# 
*n^$4XT. TO^Oc a r r yWl2 s um«$*l§ 0 fit, 12 
*-T--^-e#e>4x£:!l 1 s um^IllT^S. Zl<Z>3g 3 *-r- £HCfc#£ c a 
r r yM2 s u m 07 tCj^bfcC^xy U 1 1 0 <D c 
a r r yft^gp 1 1 2 IC;TO UT 
I4^f-i?t'lt I3^f-^#e>tlfec a r r yMf 2 s umi:, % 

Oc a r r yfttff 2 s umA^StlS. T&<Z> ^ < O**(0flfett* 1 

s um&S^fct&2 s um^iD»$4li*lCiiiaU , rv>*. i©»4 S;^, 
07 iZmlrfcU^XV U 1 1 0CHA/FA7W 1 1 3 tC*f-/£bT^<6. 

H5X-r-^T*«, i4^f-^T'#^tltcarryM2sumt, £ 
4X-r-^=fejtifiLfe»l s um2fctHg2 s u m £ ^|mS3 tlT, SD^M^T'S) 

2 0 tC*h£LTV>5„ -T^fc*), rOl5^f-^'tffi*3tl5l2 s um^, 
GF(p)OiI^t&5. 
[0 0 2 5] 
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[»5] 

gkj=a i b j (k = i + j,0<i,j<n) 
{ s k,o.-",S k | (n .| k _ n | )/3l } 

{sum FA (g k 0 , g k , , g k2 ),-•-, g k } (| n _ k| mod 3 = 0) 

= < {sum FA (g k0 ,g kl ,g k2 ),---,sum HA (g kk _ l ,g k )} (|n - k| mod 3 = 1) 

{sum FA (g k 0 , g k , , g k 2 ), • • - , sum FA (g k k _ 2 , g k k _, , g k ) } (|n - k| mod 3 = 2) 

{Cicc'^'Ckldi-lk-n^/al} 

= [{carry FA (g k 0 , g k , , g k 2 ),-••, carry ^ (g k k _, , g k )} (| n - k| mod 3 = 1) 

{{carry FA (g k 0 , g k , , g k 2 ),-••, carry FA (g k k _ 2 , g k k _, , g k )} (|n - k| mod 3 = 0 or 2) 

[0 0 2 6] 

Z>A±A ( 

a n _p " ' " ♦ a i> a g) » B ( b n _p • • • » b p b q) (Dpfc-fr 

a a 4 b ^^izmcDMn.^ i wi^M<fr&A,T\ v^xyv-mi 1 

09 0 1 JC^L/fe. 8 fcfy hCDA^JA, B^fflUfC, m £ < 8 tf y h ©A^J 

mi p&y^xyv-ffli i o nmscDV^^yv -3i i o t Zit%i~?z> £. 

, AXB jC£tt£T&8#T<Z)3P3«CA#C= (c ? , c 6 , • • c Q ) 
[0 0 2 7] 

M±wtmLf~*mM<Dmm(Dmni& 1 o o&, o ot*gf( P ) 

^t/GF(2 n )02 ~D 0) : -&M'&fs o It^T'lSfci!), HUM* 1-0 0 
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*fc*mm<Dj&m<Dm&& iooh n^^n^ h©/^ whiiimit? 

M7Ll£n= 3 2 \Zv h/Ut Lfe«-£\ 1 0 2 4 tf y h#tlg#gic«k 5 

->y r;i/ffe»#i:Hg&©*&3S&, <£ u^iitc^e> r ttfBtmx&z (32x3 

2= 1 0 2 4) „ Lfc^ot, «I*ftt$)5f-^©^X (^-dttf^ 
[0 0 2 8] 

S&tC#i£§6©Jg»©^|f#l 0 OMu GF(p)^GF(2 n )0D2o©II 

sriocD^B^i 0 off! ^ri:*«BriB7f»sfe«), f^sur zmm Lt~m* <d 

mi 1 izm~rm^mmz. 7- z ambits. fcit&^tamm (jwt, Bt-^ 
as) iz&vzmw^mt LxcDT 1 --* 2 1 0, Bt#M^tas& 2 2 0 , 

§12/ 7 M/ # 2 2 1 , 7FU^l/i;x^ 2 3 0 =E U 2 4 0 i: 

> mmMmx&ZT-* z&w-tz&w^®.}! vx&t^v 2 5 1, 2 5 2 

Bgp#«ta<Z)|lff^S7?&S*ftI?il3ff» 2 6 0 t fcffii^So 
[0 0 2 9] 

ic&HT^EIK'Tftt, 7 s 2 1 0 IC T £ ft S^-* If >fXT5\ 

Bt-^Mnis&2 2 oMm-yy v WTsZ 2 2 1 tc<k y, ^-^cDB&^b^feii 

^tticfflv^ft&r?^*-* (M«) *?«jestis. fit, TFUXl/^ 

* 2 3 0 &t>*;* ^ y ffitffia& 240 <d fflffliz * y , . * ^.y 2 5 1 , 252 tc#f£ 
*g|f#t2 6 otc«s*is 0 ifnlf§2 6 0ii, ^A^-#<z>&iHH[:££« 

^ft©fc*©?SIIMUI£fT"5- Z.<Dffiom&.&2 6 0 tit, #JU6<Z>7gJB(B 
fMl 0 0 fcffiv^:: 
[0 0 3 0] 

zLvm^mmz&^^x. »miM2 6 0tt, Hr^JSKas^T, gf( P )± 
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r s Att&m^&miztsvzm^nFim^ttaD s a^-c«g f ( P ) 
#11 2 0©m^^?imMmi:LTmi7^tis o 

^nHgP#^^<DBif^S{Cfe^^M»T'liGF(2 n )±(7)m^:$:ilt--2> 
«fOM^#|2 6 O^fSil^l 0 OCDs umfflgPl 1 1 ©ffl^j^ 

[0 0 3 1 ] 

£tc. ^mmcDmmcomm^ 1 o o &6gffi^tg&f&(ay:/y^-^3>£:LT 

mi 2 it. *mm(w&M\z&z>mm.%iii o o ^m^/vtm^^JEm^m^ 

mi 2ic^-r^utiiEiaii^tt, yy Fu-jutrnm? iot, #^^gp3 
2 oh, My&fiMgp3 3 o mvmmmms 4 o mjJtJiEms 5 0 1. 

*ffiz.z> 0 yy Pu-I±tm33 1 0 te, f-^©i*j;^->[:jSi: 

t5o #^^giJ3 2oii, yy Fu-&iiT--zmik&m(Dmmfrt>. iy 

&WZ&&2>&m#: (i'JfiSW) tcSbcD^m^ 
(i'Jtt#TO h^^-TSo ^'J»i|3 3 0lt #^M3 2 0 

4 Ote, I'JTOii3 3 0t^i*t^iJStt#^M3 2 OlCT£j& 
$tl^^Uffi#^hlC*^V^T^U«$:fm-t^ 0 |SUfTlE3P3 5 Ote, «»> 
&«f£M3 3 3 0 T'&tbfcWJ) tfLUlZMfo-t # tC, ^'JiSfS3 4 0? 

[0 0 3 2] 

rcOiHUfTiElIIg&lC&V^, yy Fa-Aft3l3P3 1 0, #^=££^3 2 0 

, i'jfiiMM 3 owi'jiiM3 4 ozmf&-t2>mmmMm&3 1 1 

, 321, 322, 331, 341, 34 2 &0|&J||I1{& 3 4 3 tit, 
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^i^l 000s umtmasi 1 1 fr&fflifrStlS. 
[0 0 3 3] 
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